Privacy, Storage & Deletion Policy
Our core purpose is to protect your digital footprint from marketing surveillance, unwanted newsletters, and data breaches. This document outlines exactly how your data is handled, stored, and irrevocably destroyed.
1 Zero Personal Information & No Registration
TempMail is designed to operate completely without personally identifiable information (PII). When using our service:
- ✓No account registration or passwords
- ✓No telephone numbers or identity verification
- ✓No credit cards or billing details
- ✓No behavioral user tracking profiles
2 Data Handling & Minimization
To display incoming emails, messages must be received, parsed, and rendered. We enforce strict data minimization:
What We Store Temporarily
- • Header Details: Sender address, sender name, recipient address, subject, and arrival timestamp.
- • Message Content: Sanitized HTML and plain text required to render your email in the reader.
- • Session Token: An ephemeral cryptographic token stored in your local browser to authorize inbox viewing and deletion.
What We NEVER Store
- • Executable Attachments: File downloads and attachments are stripped upon delivery to prevent malware distribution.
- • Client IP Addresses: IPs are never linked to generated email addresses or stored in our database.
- • Outbound Communications: The system is strictly inbound-only; we maintain zero outbound SMTP sending capabilities.
3 Permanent Hard-Delete & Purge Guarantees
Unlike services that perform "soft deletes" (hiding data while keeping records in shadow databases), TempMail provides genuine, irreversible erasure:
Instant User-Initiated Hard Delete
When you click the Delete button on an inbox or a message, an authenticated deletion cascade immediately destroys all message rows and the inbox key from active database storage. It is unrecoverable from that second forward.
Automated Timer Expiry & Scheduled Purge
Every inbox is assigned a hard expiry timestamp (2 hours default, extendable up to 24 hours). An automated background schedule runs every 30 minutes, executing a hard purge of all expired inboxes and messages.
Zero Cold Backups or Long-Term Archives
We do not retain secondary tape archives or snapshots of disposable inboxes. Once purged from active storage, the data cease to exist anywhere.
4 Mobile Phone Sync & QR Handover
Our QR Code feature allows you to open your active inbox on your smartphone camera without entering passwords or downloading apps:
- Direct Token Handover: The QR code embeds your temporary session token in a secure URL.
- Zero Cloud Intermediary: Syncing happens directly between your desktop screen and your mobile lens. No third-party notification server receives your phone details.
- Security Advisory: Anyone who scans your QR code gains access to that active temporary session. Never share or stream your QR code publicly.
5 Sandboxing & Malicious Content Shield
Inbound emails can contain malicious scripts, tracking pixels, or phishing links. We enforce automated defenses:
- • Isolated Iframe Sandbox: HTML emails render inside a strict sandbox container that prevents unauthorized JavaScript execution and modal hijacking.
- • Script Stripping: Dangerous tags such as <script>, <object>, <embed>, and inline event listeners are stripped before content is displayed.
- • Secure External Links: All links inside messages open safely with security flags to protect against tab-hijacking.
6 Cookies & Advertising Transparency
This free utility may be supported by non-intrusive advertising partners such as Google AdSense:
- Third-party vendors, including Google, may use cookies to serve ads based on prior visits to our website or other internet sites.
- You can opt out of personalized advertising by visiting Google Ad Settings.
- You may also manage advertising preferences at AboutAds.info.
7 User Rights (GDPR & Privacy Laws)
- Right to Erasure: You possess immediate, 1-click self-service power to wipe all stored messages via the "Delete" button.
- Zero Sale of Data: We never sell, rent, monetize, or transfer your email content or session data to third-party data brokers.